Best OpenLDAP authentication option?

Question

我想防止用户浏览其他用户的名称，安全性（当然）和性能

Answer 1

Use Maching/Network permissions to restrict access to your openLDAP server to ONLY your management machine, and your IIS machine. Thus only those two machines can browse your directories.

Use SSL for all communication with your openLDAP server. That will require connecting to port 636.

By default, openLDAP stores passwords in the clear; instead force it to use salted hash. OpenLDAP comes with a command line utility that will hash passwords for you.